Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft
File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json)
Hash identifier: V4MGWgychaYVPWyd+Uv0ofVG8OI4AIrxrSL26nIADN4=
Subject key identifier: 58:E5:E7:48:DC:04:A7:5B:D1:C5:2F:53:78:F8:89:CE:78:71:D1:3A
Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A
Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A
Certificate serial: 7D49649BAACA6110F8AD7430066D032E74E51435
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft
Manifest number: 0139
Signing time: Tue 28 Apr 2026 01:01:52 +0000
Manifest this update: Tue 28 Apr 2026 00:56:52 +0000
Manifest next update: Fri 01 May 2026 08:36:52 +0000
Files and hashes: 1: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: Lp4n5hU0GqHnsCDl04cpi3UeQxb1Hvr8W1wngqrT41A=)
2: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: hGVqGuEX7t7kDvhG/oxmBg0fqIgTNBhypbwzLMUxLwA=)
3: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 50/h0X48yF6XiQdiL01GD/aPBUnfpp8V0OZDrNu+Wug=)
4: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: ZHB+tTRgPo6rdTXygj1EBojkxuhIq9cR8qPI+iIa1cQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:49:64:9b:aa:ca:61:10:f8:ad:74:30:06:6d:03:2e:74:e5:14:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A
Validity
Not Before: Apr 28 00:56:52 2026 GMT
Not After : May 1 08:36:52 2026 GMT
Subject: CN=58E5E748DC04A75BD1C52F5378F889CE7871D13A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:c0:dd:92:89:a0:ad:d2:a3:af:b5:d4:5f:
c7:d7:ff:f0:6a:fb:2d:46:35:9c:41:2b:d8:a4:cd:
6d:3c:16:2d:d4:8e:b8:85:c8:e8:87:f0:a4:e0:bc:
bd:b5:02:c8:66:6c:03:26:c7:33:b5:c2:dd:5a:38:
99:7d:14:87:89:10:c1:50:39:98:70:a5:c9:64:2f:
a3:a8:75:11:6c:90:bf:b7:48:27:18:9e:f9:99:b9:
de:e1:18:63:bb:7a:20:73:d9:7c:67:46:c2:2c:83:
d3:7e:e6:88:7f:c6:d5:73:df:1f:dd:9d:b9:fa:25:
bb:68:96:f9:e4:24:13:73:92:b1:6d:ae:e3:0a:81:
49:7b:c2:59:1e:3f:be:d3:3b:22:32:fd:ce:13:37:
78:1b:d9:88:41:7d:ec:73:16:76:ba:9f:9f:f6:ce:
91:27:a1:90:92:fc:19:ef:29:b7:94:a8:d0:61:ef:
03:82:3e:50:d6:96:e9:28:c3:3e:90:9f:07:94:d4:
09:0f:45:5e:0c:c5:47:a2:ab:b3:48:4c:b2:a9:e1:
88:03:2a:0c:71:c7:93:95:a3:93:7c:9e:b3:7f:00:
e6:82:da:62:9b:59:fa:ea:58:0d:f5:a3:44:5e:77:
a5:79:18:a6:b5:b1:94:8d:9c:75:21:04:1a:22:38:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E5:E7:48:DC:04:A7:5B:D1:C5:2F:53:78:F8:89:CE:78:71:D1:3A
X509v3 Authority Key Identifier:
keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2f:3d:5e:66:7a:0c:7d:1a:59:63:bb:cb:a1:e0:49:81:8a:
7a:4f:d2:8a:4d:81:36:57:3f:47:7f:32:27:96:24:85:c6:dc:
af:a1:58:1a:26:00:4c:8c:8c:59:2b:fc:9b:b1:97:18:23:a5:
7b:5e:a5:94:02:6a:0d:ec:0d:40:2f:d5:9a:dc:b9:4a:d4:d9:
f7:1e:98:8b:ec:09:4c:98:48:6b:c2:86:32:95:5b:6c:a3:c8:
e0:d2:58:13:c9:41:2b:db:60:97:b3:cd:7c:ba:d8:6b:c9:58:
fb:27:69:48:20:da:e4:89:52:8a:bf:3b:34:a0:de:a1:13:0c:
25:df:32:26:aa:af:5b:87:8e:41:67:2f:87:9f:ea:99:92:4a:
13:d8:90:e3:56:e7:32:53:6d:26:92:27:f3:95:cd:1a:44:ec:
c0:82:f7:f0:f5:38:57:2d:fe:92:46:3d:fb:16:d9:db:91:1c:
b5:b7:f3:50:fc:bd:2a:cd:ed:58:1c:5a:9f:67:b7:b7:21:59:
c6:60:40:37:b4:27:86:06:35:d3:a4:3b:39:4c:00:1f:7a:ff:
7b:3f:7b:0d:3e:06:cd:1e:18:62:ef:75:aa:f0:3a:64:db:d3:
e4:58:8d:93:77:cd:3a:03:79:cf:39:61:27:2d:98:ec:7e:a0:
1f:a4:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:53 2026 by rpki-client